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(54) Abstract Title 

Authentication using biometrics identification 

(57) An authentication method using biometrics identification comprises the steps of: identifying 12 a user by 
biometrics entered 10 from a portable authentication terminal 1; when the user has been registered previously, 
establishing communication between the authentication terminal 1 and an authentication executing device i 
and calculating a common secret key for use in transmission of an authentication message; encrypting 15 an 
authentication message including information inherent to the user (eg. password) in the authentication 
terminal 1 based on the secret key; sending the encrypted authentication message to the authentication 
executing device 2; and decrypting the authentication message there based on the calculated secret key, 
thereby executing an operation depending on the user-inherent information included in the message. 
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AUTHENTICATION EXECUTING DEVICE, PORTABLE AUTHENTICATION 
DEVICE, AND AUTHENTICATION METHOD USING BIOMETRICS 

IDENTIFICATION 

warycraoUNns ng THE TNVgNTSQSK 

The present invention relates to an 
authentication executing device, a portable device for 
authentication, and an authentication method for 
certifying a user's identity through the check of 
biometrics, that is, his or her physical features such 
as fingerprints that can be measured, thereby to allow 
the operation executable only by the user himself or 
herself » 

rresraTPTTP w nF teds t^t.&ttto ftRT 

The operations executable only by a user himself 
or herself in an information processing system, for 
example, in a personal computer (hereinafter, referred 
to as a PC) include a log-in operation of the identified 
user, electronic commerce of dealing with a person in 
confirmation of the person's identity, and further file 
encryption and decryption. 

in the conventional technique, a user's input of 
a password certifies that a person trying to do the 
above operation is the authorised user. In this ease, a 
person asking for permission has trouble registering 
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his or her predetermined password in advance, and if the 
password should be stolen, another user will make 
fraudulent use of the PC, acting like the authorized 
user . 

In order to solve the problem, a method of using: 
biometrics such as fingerprints, instead of a password, 
has been proposed. Below the description will be made 
with reference to Fig. 7, by way of example, in the case 
of using fingerprints as the biometrics. 

In the conventional technique, a fingerprint 
sensor 10 is connected to a PC; feature information for 
matching the user's extracted fingerprint data is 
stored in a user-inherent information storing Unit 13 
within the PC; when some fingerprint is provided by a 
user's input, a fingerprint feature extracting unit 11 ^ 
extracts the feature information from the fingerprint; a 
fingerprint checking unit 12 judges whether the feature 
of the fingerprint is in accord with the stored data; 
only when they are of one accord, the user is certified 
as the authorized user and a user-inherent operation 
executing unit 17 performs the user identification 
operation. 

in this form, since the input image and feature 
information of the fingerprint is processed within a 
system performing authentication, there is a risk that 
the feature information may be stoken by tampering with 
the program when the system is not under the control of a 
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user, Zn order to solve the problem, there has been a 
method ©S holding the fingerprint Mature information 
st®red ia the user inherent formation storing unit 13 
in Fig. 7, on e portable terminal carried fey a user, 
g issuer fch© control of the us@? f speeigieally, on as 

information terminal such && sa @3.@etrenie notepad, or 
@© © »«diua, So* exaaple, aa 56 eard, and traWerriag 
fefe© content thereof to a PC to eheek th© data. Even in 
this way 9 h©w®v@r, when a £ing®rprint semes? is 
'©oaaeeted te a PC in poor naswf ement f th©??® is a 
possibility o« fevering ^ith * program for controlling 
fingerprint input, so as to «ct like an authorised user, 
a® if th© authorized user had entered the fingerprint 
through the finger sensor, by using the fingerprint 
4®ag© of the other person being eepied and stored, or 
© sraudulost fingerprint image. 

On the other hand, the above portable terminal 
that ean be carried by a user has the advantage that the 
user's identity can be checked at any place. However, it 
is troublesome to insert the terminal into a PC, or 
connect the terminal to a PC by a cable in order to do an 
authentication operation . There is a method of using 
iafrared rays, radio waves, sound waves, or the like in 
a aos-eentaet .way, so to exchange data therebetween. 
These signals, however, are easily intercepted, and 
there is the possibility that the other person, 
receiving the data signal, makes use of it again so as 
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to act like the authorized user. 

. lUfflinffY OF TP= TWVEMTIQH 
An object of the preferred embodiments of the 
present invention is to provide an authentication method 
and system with high security, free from the trouble of 
remembering a password and the risk of the other person 
using * PC by acting like the authorized user, capable of 
connecting a terminal with the PC by infrared rays, radio 
• waves, or sound waves, taking portability into 
consideration, with no possibility of stealing the 
fingerprint data and making fraudulent use of a message. 

According to the first aspect of the invention, 
an authentication method using biometrics identification 

comprises the following steps t 

identifying a user by biometrics entered from a 

portable authentication terminal, 

when the user has been registered previously, 
establishing communication between the authentication 
terminal and an authentication executing device 
independent of the authentication terminal, and 

kev for use in transmission 
calculating a common secret Key 

of an authentication message, — 

encrypting the authentication message including 

the user's inherent information based on the secret key 

in the authentication terminal, 

sending the encrypted authentication message fro» 
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the authentication terminal to the authentication 
executing device, and 

decrypting the authentication message based on 
the calculated secret key in the authentication 
5 executing device, thereby executing ar operation 

depending on the user inherent information included in 

the message. 

Xn the preferred construction, the communication 
message is transmitted in one of non- contact types of 
10 "cossaunications, for example, via infrared rays, radio 

uaves a and sound waves* 

Xn another preferred construction, the user- 
inherent information included in the authentication 
message includes such secret information as cannot be 
15 * read out without identification of an authorised user 

from the biometrics in the authentication terminal - 

Xn another preferred construction, an operation 
t© be executed by the authentication executing device 
depending on the user-inherent information is a non- 
20 executable operation without identification of an 
authorised user from the biometries in the 
authentication terminal, and therefore a function of 
authenticating that a person having registered the 
biometrics previously carries and uses the 
25 authentication terminal, is provided . 

Xn another preferred construction, the user 
inherent information included in the authentication 
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message includes individual information that cannot be 
read out without identification of an authorized user 
from the biometrics in the authentication terminal, and 
using the individual information, the authentication 
5 executing device executes the operation depending on the 

information of a user employing the authentication 
function . 

In another preferred construction, the operation 
performed by the authentication executing device 
10 depending on the user-inherent information includes file* 

encryption and decryption, and a secret key for use in 
this encryption and decryption is to be stored in such a 
way that the secret key cannot be read out without 
identification of an authorized user from the biometrics 
15 in the authentication terminal. 

According to the second aspect of the invention, 
a portable terminal for authentication using biometrics 
identification comprises 

biometrics image input means for receiving a 

20 user's biometrics image, 

biometrics feature-extracting means for 
extracting a biometrics feature for matching from the 

input biometrics image, 

user -inherent information storing means for 
25 storing the biometrics feature and inherent information 

of the user in pairs , 

secret-key-agreeing means for deciding a key for 
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use in encryption of an authentication message between 
the authentication executing device and the portable 
terminal , 

biometries image-checking means for comparing the 
biometrics image extracted from the user's input 
biometrics image with the biometries feature stored in 
the user-inherent information storing means, judging 
whether the user having entered the biometrics image 
this time is a registered user or not, and when this 
'user is a registered user, supplying the inherent 
information stored in pairs with the biometrics image in 
the user-inherent information storing means, 

authentication-message encrypting means for 
eaerypting the user's inherent information by the 

decided secret key, and 

communication-message sending means for sending a, 
communication message to the authentication executing 
device <> 

la the preferred construction, the user-inherent 
information storing means stores the biometrics features 
sad inherent information for a plurality of users, and 
the biometrics image ^checking means estimates score- 
indicating similarity of the biometrics images, and 
judges that the user having entered the biometries image 
this time is a registered user when the score is higher 
than a threshold. 

Xti another preferred construction, the user- 



- 8 - 



inherent information storing means stores the biometrics 
features and inherent information for a plurality of 
users, and the secret key-agreeing-means creates any 
random number, sends the random number to the 
authentication executing device, and calculates the key 
by use of a secret formula based on the same random 
ntombex* 

in another preferred construction, the biometrics 
image checking means estimates a score indicating 
similarity of the biometrics images, and judges that the - 
user having entered the biometrics image this time is a 
registered user when the score is higher than a 
threshold, and the secret-key-agreeing means creates any 
random number, sends the random number to the 
authentication executing device, and calculates the key., 
by use of a secret formula based on the same random 
number • 

in another preferred construction, the user- 
inherent information storing means stores the biometrics 
features and inherent information for a plurality of - a 
users, and the secret-key- agreeing means performs mutual 
authentication together with the authentication 
executing device according to a predetermined protocol 
and countersign prior to deciding the key. 

in another preferred construction, the biometrics- 
image checking means estimates a score indicating 
similarity of the biometrics images, and judges that the 
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Vises having entered the biometries image this time is a 
^©gig'kes'eea user when the sgqs® is higher than a 
fchr@gheld, ©ad the secret -key- &gs?@niag means performs 
mutual authentication together with the authentication 
©2S®eutia? device according t© a predetermined protoeel 
©ad countersign p^ior to deeidisag th® key. 

anether pr©^©s^e4 @Qa§ts?uetiaa, the user- 
inherit in^ewfeiea storing paaan stores the biometrics 
£©etusre§ ©a<& inherent in£orsaat4©& ^os? « plurality of 
'lasers, aa4 the secret- key«~afs-e©4ag means creates any 
srsadesa aumbes, sands the crssted raadom number to the 
authentication executing deviee, receives the created 
random number from the authentieatioa executing device, 
aad creates the key by use of both random numbers. 

la another preferred construction, the biometries* 
imaf ©^cheeking means estimates ' a seose indicating 
Similarity of the biometrics images, and judges that the 
ygser having entered the biometrics image this tim® is a 
registered user when the score is higher than a 
threshold, and the secret- key- agreeing means creates any 
random number, sends the created random number to the 
authentication executing device, receives the created 
random number from the authentication executing device, 
and creates the key by use of both random numbers. 

In another preferred construction, the portable 
terminal communicates with the authentication executing 
device by one of noa-contact types of communications, for 
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example , via infrared rays, radio waves, and sound waves. 

jn another preferred construction, the portable 
terminal communicates with the authentication executing 
device through another terminal , 

According, to the third aspect of the invention, 
an authentication system for performing authentication 
using biometrics identification, comprises 

a portable terminal and an authentication 

executing device, 

wherein the portable terminal includes: 

biometrics image input means for a user's 

receiving biometrics image, 

biometrics feature extracting means for 

extracting a biometrics feature for matching from the 

input biometrics image, 

, user-inherent information storing means for 
storing the biometrics feature and inherent information 

of the user in pairs, 

secret-key-agreeing means for deciding a key for 
use in encryption of an authentication message between 
the authentication executing device and the portable 
terminal , 

C biometrics image-checking means for comparing the 

biometrics image extracted from the user's input 
biometrics image with the biometrics feature stored in 
the user inherent information storing means, judging 
whether the user having entered the biometrics image 
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this -time is a registered user or not, and when this 
user is a registered user, supplying the inherent 
information stored in pairs with the biometrics image in 
the user inherent information storing means, 

authentication message encrypting means for 
encrypting the user's inherent information by use of the 

decided secret key, and 

communication message sending means for sending a 
communication message to the authentication executing 

10 / ' device, 

wherein the authentication executing device includes: 

secret-key- agreeing means for deciding a key for 
use in encryption of an authentication message between 
the portable terminal and the authentication executing 
15 V device e 

communication message receiving means for : 
receiving a communication message sent from the portable 
terminal , 

authentication message decrypting means for 
decrypting the communication message by us® of the 
decided secret key, and 

user inherent operation executing means for 
executing the user-inherent operation based on the 
inherent information decrypted from the communication 
25 message. 

In the preferred construction, the user-inherent 
information storing means of the portable terminal 
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stores the biometrics features and inherent information 
for a plurality of users, and the biometrics images 
checking means estimates a score indicating similarity of 
the biometrics images, and judges that the user having 
entered the biometrics linage this time is a registered 
user when the score is higher than a threshold. 

In another preferred construction, the user- 
inherent information storing means of the portable 
terminal stores the biometrics features and inherent 
-information for a plurality of users, and the secret-key- 
agreeing means creates any random number, sends the 
random number to the authentication executing device, 
and calculates the key by use of a secret formula based 
on the same random number. 

in another preferred construction, the biometrics 
image-checking means of the portable terminal estimates 
score indicating similarity of the biometrics images, 
and judges that the user having entered the biometrics 
image this time is a registered user when the score is 
higher than a threshold, and the secret-key-agreeing 
means creates any random number, sends the random number 
to the authentication executing device, and calculates 
the key by use of a secret formula based on the same 

random number. 

in another preferred construction, the secret-key- 
agreeing means of the authentication executing device 
calculates the key by use of the same secret formula as 
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that of the portable terminal based on the random number 
sent from the portable terminal » 

Xn another preferred construction r the secret- key^ 
agreeing means of the authentication executing device 
5 receives the random number from the portable terminal , 

creates any random number, and creates the key by use of 
the both random numbers <> 

According to another aspect of the invention, a 
computer-readable memory stores an authentication 
10 program for making a computer perform authentication 

using biometrics identification, 

the authentication program comprising 

a biometrics -image input step for a user's 
receiving biometrics image, 
15 a biometrics feature extracting step for 

extracting biometrics -feature for matching from the 
i&put biometrics image g 

a secret-key-agreeing step for deciding a key for 
use in encryption of an authentication message between 
20 the authentication executing device and the portable 

terminal ff 

a biometrics -image checking step for comparing 
the biometrics image esstracted from the user's input 
biometrics image with the biometries feature stored in 
25 the user-inherent information storing means for storing 

a pair of the biometrics features and inherent 
information of the user,, judging whether the user having 
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entered the biometrics image this time is a registered 
user or not, and when this user is a registered user, 
pupplying the inherent information stored in pairs with 
the biometrics image in the user-inherent information 

storing means, 

an authentication message encrypting step for 

encrypting the user's inherent information by use of the 

decided secret key, and 

a communication message sending step for sending 
\ > communication message to the authentication executing 
/ device . 

in the preferred construction, the biometrics- 
image checking step of the authentication program 
estimates a score indicating similarity of the biometrics 

I. and judges that the user having entered the u 

biometrics image this time is a registered user when the 
ecore is higher than a threshold, and the secret-key- 
agreeing step of the authentication program creates any 
random number, sends the random number to the 

20 authentication executing device, and calculates the key 

by use of a secret formula based on the same random 
number. 

xn another preferred construction, the computer- 
re adable memory stores an authentication executing program of 
25 tne authentication executing device, the authentication 

executing program making a computer perform: 
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a secret-key-agreeing step for deciding a key for 

m® ±a encryption of an authentication message between 

fehe authentication program &®4 th® authentieation 

@sg®Gutiaf program; 

$ @onsjjunlcation~mes©af© receiving, stejp £@r 



©a authenticatiea-a©ss©f© decrypting step for 
$@erypfeinf the communication sa©®s&f@ by use of the 
'^©eided secret key? and,, 

a user-inherent operation executing step fas' 
®x©euting the user inherent operation based on th® 
inherent information decrypted from the communication 
$KS§sag© o 

X® another preferred construction, the secret-key- 
agreeing step of the authentication executing program 
esiieulaten the key by use of the same secret formula as 
that of the portable terminal based on the random number 
sent from the portable terminal. 

Za another- preferred construction,, the secret-key- 
agreeing step of the authentication executing program 
receives the random number from the authentication 
program, creates any random number, and creates the key 
by use of both random numbers. 

Other objects, features and advantages of the 
present invention will become clear from the detailed 
description given hesebelow. 
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ffftTT! F nfcrwTPTTON OF THE DRAWING S 
Preferred features of the present invention will 
now be described, by way of example only, with reference 
to the accompanying drawings, in which : - 

Fig. 1 is a block diagram showing the structure 
of an authentication system according to an embodiment 
of the present invention; 

Fig. 2 is a flow chart for use in describing the 
operation of a portable terminal according to a first 
embodiment of the present invention; 

Fig. 3 is a flow chart for use in describing the 
operation of the authentication executing device 
according to the first embodiment of the present 

invention; s* 
Fig. 4 is a block diagram showing the structure 

of an authentication system according to the other 

embodiment of the present invention; 

Fig. 5 is a block diagram showing the structure 

in the case of realizing the portable terminal by using. 

software; 

Fig. 6 is a block diagram showing the structure 
in the case of realizing the authentication executing 
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device by using software; 

Fig. 7 is a block diagram showing the structure 
of a conventional authentication system 

The preferred embodiment of the present invention 
will be discussed hereinafter in detail with reference 
t© the accompanying drawings . la the following 
description, numerous specific details are set forth in 

10 "order to provide a thorough understanding of the present 

invention. It will be obvious, however, to those skilled 
in the art that the present invention may be practiced 
without these specific details. In other instance, well- 
known structures are not shown in detail in order to 

15 unnecessary obscure the present invention. 

The present invention is to identify a user by 
the biometrics being entered and perform the stored user 
inherent operation only when the entered biometrics is 
in accord with the registered one. Especially, 

20 biometrics input and its feature extraction, and 

checking processing is performed by a terminal that a 
user carries, and communication between the terminal and 
an authentication executing device for executing the 
user's inherent operation is encrypted by a secret key 

25 particular to the communication about which the portable 

terminal and the authentication executing device are 
agreed, thereby to assure the security in the whole 



system. 

With reference to Fig. 1, an authentication 
system according to a first embodiment of the present 
invention comprises a portable terminal 1 and an 
authentication executing device 2. ^ 

The portable terminal 1 comprises a fingerprint 
sensor 10, a fingerprint feature extracting unit 11, a 
fingerprint checking unit 12, a user inherent 
information storing unit 13, a secret key agreeing unit 
14, an authentication message encrypting unit 15, and a< 
communication message sending unit 16. 

The authentication executing device 2 comprises a 
communication message receiving unit 21, a secret key 
agreeing unit 22, an authentication message decrypting 
unit 23, and a user inherent operation executing unit 24, 
Each component of the portable terminal 1 and the 
authentication executing device 2 will be hereinafter 
described in accordance with its operation. Fig. 2 is a 
flow chart showing the operation of the portable 
terminal 1 and Fig. 3 is a flow chart showing the :* 
operation of the authentication executing device 2. 

The fingerprint sensor 10 of the portable 
terminal 1 picks up the fingerprint's image when a 
finger of a user comes into contact with it, and 
converts the image data into digital image data suitable 
to be processed in the fingerprint feature extracting 
unit 11 (Step 201). 



As the structure of the fingerprint sensor 10 , 
such an optical method can be used, that the LED-exnitted 
light is reflected by the prism and the reflected light 
is converted into digital image by a CCD by making use 
of difference in the reflection rate between ridges and 
furrows according to the finger put outside of the 
reflected surface, thereby to pick up the fingerprint 0 s 
image o Or, a use of such a fingerprint sensor of the 
capacitance detecting method, as disclosed in °& Robust, 
I08V, 250uW, Direct Contact 500dpi Fingerprint Sensor 0 
(Inglis et al.) f XEEEE 2SSCC98, BK 17 . 7 pp* 284-285 (1998 
2) , could realise a thin and small sised fingerprint 
sensor more suitable for portability „ In this 
capacitance detecting method, by measuring the 
difference in the capacitance between the ridge portion 
and the furrow portion having a layer of the air on the 
surface of a finger coming into contact with the sensor, 
the figure of the fingerprint is converted into digital 
image, thereby to pick up the fingerprint's image o 

The fingerprint feature esstracting unit 11 
receives the fingerprint's image obtained by the 
fingerprint sensor 10 and executes the processing of 
extract iag the feature for use in fingerprint 
identification from the same image (Step 202)- 

The feature extracting method includes, for 
example, a method described in the following articles s 
Automated Fingerprint Identification by Hinutia-Network 



Feature —Feature Extraction Processes—" written by 
Hiroshi Asai, Yukio Hoshino, Kazuo Kichi, The Institute 
of Electronics, Information and Communication Engineers 
Transactions, vol. J72-D-II, No. 5, pp... 724-732 (1989.5). 
Here, the pattern of ridges is extracted from a gray- 
scale image of ridges by the binarization processing and 
thinning prbcessing, the number of the intersectional 
ridges on the line interconnecting the end point and the 
bifurcation is counted after detecting the positional 
"relation between the both points, and the relational 
view is represented in digital data, which is used as 
the fingerprint feature to be matched. 

The user inherent information storing unit 13 
stores the fingerprint feature information of the above 
format and the corresponding user inherent information 
(secret information) particular to a user owning the 
above fingerprint in pairs. 

Here, the user inherent information means the 
data including useful information of various formats on 
user's identify, such as unique identifier for 
identifying a user, and the data which only the user is 
permitted to access to, for example, a password for use 
in log-in to a computer, the secret alphabet and numeral 
string (secret number or password) for identifying a 
person in the electronic commerce, and the like. 

When storing a new pair of the user inherent 
information and the fingerprint feature information, the 
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U©@£ inherent information to fe® stored is entered from a 
p©n=typed ippwt unit of a portable terminal, tfc® 
2&»f®rprint of the corresponding user is entered from 
th« *iag«spyi»* sensor 10 , ap& th<§ fingerprint feature 
©&tiiia@3 by tJ *e fingerprint $«afcw*e ©attracting unit 11 
b©s®4 on the above in£ormati©& ia stere4 i*» the us©? 
inherent ^formation storing W fcef©th©r with th© 

cpsvespem&a? user inherent information. ws ®^ 
4.n&@reat information storing unit 13 may be designed to 
"©tore only the fingerprint of one user on the 
authentication system and his or her secret information, 
or it may be designed to stosr® the fingerprints of a 
plurality of users and their secret information in pairs, 

She fingerprint checking unit 12 receives the 
fingerprint feature s obtained from the fingerprint a 
user entered this time, from the feature extracting unit 
11 # while the unit 12 reads out and receives © paiJ? of 
the fingerprint feature information F having been stored 
so far and the corresponding secret information stored 
in the user inherent information storing unit 13 , fro® 
the user inherent information storing unit 13 (Step 203 J. 

The fingerprint checking unit 12 compares the 
fingerprint feature information F with the fingerprint 
feature S obtained from the fingerprint entered by the 
user, and estimates the score of the similarity, the 
score increasing ^hen the both information is proved to 
be on the identical finger (Step 204). 
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Sy comparing the score with a predetermined 
threshold, the fingerprint checking unit 12 judges 
whether the user giving the fingerprint information S is 
the identical to the registered user or not (Step 205). 
When the score is higher than the threshold, it results 
in -fingerprints are in accord" and the unit 12 supplies 
the secret information corresponding to the fingerprint, 
to the authentication message encrypting unit 15 (Step 
206). 

As the method of identifying a person by checking 
the fingerprints, there is a method disclosed, for 
example, in the following articles; -Automated 
Fingerprint Identification by Minutia-Network Feature — 
Watching Processes—- written by Hiroshi Aaai, Yuklo 
Boshino, Kazuo Kichi, The Institute of Electronics, 
information and Communication Engineers Transactions, 
V01.J72-P-II, No. 5, pp. 733-740 (1989.5). Here, the 
number of the interactional ridges on the line 
interconnecting the end point and the bifurcation of a 
ridge is counted, digital data represented points are 
aligned, and thereafter the similarity therebetween is 
estimated, thereby checking the fingerprints. 

The fingerprint feature used in the embodiment 
assures the stable and correct check results even if 
there is deviation or distortion between the 
fingerprints. In the case of the same finger, the above 
score is extremely high, while in the case of a 
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different finger,, the score approaches to zero. Further, 
the data size is much smaller than the size of the input 
fingerprint's image, thereby decreasing the arithmetic 
processing for checking advantageously. 

As the result of checking the fingerprints , when 
the input fingerprint is in accord with the fingerprint 
feature stored in the user iaherent information storing 
unit 13 , the secret information on the user stored in 
the user inherent information storing unit 13 is 
supplied to the authentication executing device 2. 

This operation will be performed as follows. At 
first , the secret key agreeing unit 14 creates any 
random number R that may be the base of the secret key 
for this communication, and supplies this to the secret 
key agreeing unit 22 on the side of the authentication 
executing device 2. For this transmission, infrared 
communication through the infrared communication ports 
provided in the both sides is adopted. 

She secret key agreeing unit 1* calculates the 
secret key K for message encryption using the secret 
calculation formula, based on the supplied random number 
r (Step 207 )» As this calculation method, for example, 
th© hash function can be usedo 

On the other side, the secret key agreeing unit 
22 on the side of the authentication executing device 2 
also calculates the secret key K for message encryption 
using the same secret calculation formula, based on the 
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supplied random number R. Namely, this calculation 
formula is inherent to the both of the portable terminal 
1 and the authentication executing device 2 of this 
authentication system and secret. Therefore, even if the 
random number R is stolen, it is impossible to calculate 
the secret key K in the other system. 

The authentication message encrypting unit 15 
encrypts the secret information of the user who was 
agreed about the fingerprint matching, received from the 
user inherent information storing unit 13 by use of the; 
secret key K calculated by the secret key agreeing unit 
14, and creates a communication message (Step 208). For 
example, the secret common key encryption method such as 
DBS is used for this encryption. 

The communication message sending unit 16 1 
supplies the encrypted message received from the 
authentication message encrypting unit 15, to the 
authentication executing device 2 (Step 209). For this 
transmission, infrared communication through the 
infrared communication ports provided in the both sides 
is adopted, for example. 

On the side of the authentication executing 
device 2, the communication message from the portable 
terminal 1 is received by the communication message 
receiving unit 21 (Step 301), which sends the same : 
message to the authentication message decrypting unit 23 
The authentication message decrypting unit 23 receives 
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the secret key K having been calculated in secret from 
the secret key agreeing unit 22 9 and decrypts the 
encryption by using the same key as the secret common 
key (Step 302) o 

Thus, the secret information stored in the 
portable terminal 1, which cm be referred to only by 
the input of the correct fingerprint of th© 
authenticated user is sent to the authentication 
executing device 2 without being stolen o The 
authentication executing device 2 executes the operation 
using the secret information in the user inherent 
operation executing unit 2% (Step 303). 

For example, log- in to a computer may be 
permitted the authorised user, or the content of the 
secret file of the user himself or herself may be read 
out and displayed on a display of the authentication 
executing device 2« Or, the authentication executing 
device 2 may assure the other information processing 
system that a user carrying the portable terminal 1 so 
as to enter the fingerprint is the authorised usero 

Further, the alphabet and numeral string for 
certifying the identity in the electronic cossaerce may 
be seat to the electronic eo^aeree trading company 
connected over a network via the authentication 
executing device 2 » 

In the above operations Q the secret information 
stored in the portable terminal 1, which cannot be read 
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out without correct biometrics input, can be sent to the 
authentication executing device 2 safely, and the 
authentication executing device 2 can authenticate a 
user, only when a user entering the fingerprint through 
the portable terminal 1 is the user having been 
registered previously. 

Further, since the secret Hey particular to the 
communication of secret information is used in. the 
secret Key agreeing unit 22 hy mutual agreement between 
' the portable terminal 1 on the sending party and the 
authentication executing device 2 on the receiving party, 
it is impossible for the other person to decrypt the 
content of the secret information and send the secret 
information acting like an authorised person, even if 
intercepting the past communication using the infrared. . 
rays to record and reproduce, 

jn the above description, although a most easy 
method, such that the secret key agreeing unit 14 . 
creates the random number and sends it to the secret key 
agreeing unit 22 one-sidedly, has been described, there 
is a method of mutual authentication between the 
portable terminal 1 and the authentication executing 
device 2 while checking the communication party mutually 
with a predetermined protocol and countersign, in order 

to enhance the security. 

Further, as for the random number, it is created 
not only by the portable terminal 1 one-sidedly, but the 
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random number El may b® crested by the portable terminal 
I &nd th© random number R2 m©s? fee ereat®d by the 
©uthentiestion executing defies %, which may be mutually 
exchanged ? and which may be &4op£e4 in such a way 'that 
th© s@er@fc eessaen k@y couldn't b© created without th® 
b@tk rendem numbers in a coxafeincsd way or added w©y. This 
sa@£h©<d will provide th© wqsq aoe^ity* 

. ,^h®. concrete essampl®. ®$ £h® embodiment will be 
d@©@^ifeQd fc&is timeo ^he eonisr©t® ©ssasapl® is tafcen ia 
$h® eg log-in authentic ©tie® t© a personal eomputer 

(?C) • &©sum© that each uses' easries his or her own 
p@r@©n©l terminal l, where th® data of the fingerprint 
£@©t»r® ot his or her own finger and user name and 
password for use in log-in asu tn@ secret date that is 
nsfe readable in the ordinal m@thod are stored In th© 
user inherent information staring unit 13. Xn this ease, 
©(gstam® that the PC is th® authentication executing 
d^vie® 2, and that the data eomramiieation between th® 
portable terminal 1 and the authentication executing 
device 2 is performed by the infrared rays. 

When a user tries to log in to the PC, he or she 
enters the registered fingerprint to the fingerprint 
sensor 10 of the portable terminal 1. The fingerprint's 
image is entered through the sensor 10 , feature for 
matching is extracted by the fingerprint extracting unit 
11, and it is compared with the fingerprint feature of 
the user inherent information storing unit 13 by th© 
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fingerprint checking unit 12. when they are in accord, 
tb. both parties are agreed about a secret Key in the 
.hove-mantioned way. and the user name and log-in 
password encrypted using the key are sent from the 
„ rt able terminal 1 to the PC. After decrypting the data 
in the authentication message decrypting unit 23. the PC 
perform the log-in operation using the user name and 
Xog-in password, b, way of example of the user-inherent 
operation. 

in these operations, only when the correct 
fingerprint of an authorized user is entered to the 
ported terminal 1, log-in will be permitted. Xn this 

c user has no trouble of raring a passwor * 

not fear of failing to log in because of forgettin, the 
password. Without input of the correct fingerprint the 
secret information such as a password cannot he read out 
and the lo,-in operation cannot be executed, thereby 
preventing from the fraudulent log-in. 

„.t i. easily portable, and the 
Further, the terminal is easily p 

communication between the terminal 1 and the PC is 
performed by the infrared rays, with no need of 
connecting them b, a cable and inserting the portable 
„rminal 1 into the PC. Further, it can realize such 
iog-in authentication that even if the infrared 
ccmmunication is intercepted, it is impossible to decode 
a password because the message is encrypted, and even if 
th e communication content is recorded and reproduced by 
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the other person, it is impossible for the other person 
to act like an authorized person because a secret key is 
different in every time<> 

Although the above description has been made in 
the case of log- in operation to a PC, When this PC is 
used, for example, as a user terminal of a system for 
performing the electronic cosesaerce over a network, the 
log°in operation can be used, for personal identification 
in the commerce* In this case, the secret information 
stored in the portable terminal 1 corresponds to the 
customer identification number of a user and the 
information for identifying the user such as a personal 
identification number <> The secret information is sent 
from the portable terminal 1 to the user terminal of the 
system for performing the electronic commerce, the user 
terminal sends the information for the personal 
identification sent from the portable terminal 1, to an 
authentication host of the electronic commerce after the 
information is uniquely encrypted depending on the 
necessity, and the authentication host examines the 
coincidence between the same information and the 
information stored therein, thereby to confirm the 
personal identity « 

Further, in this case, the portable terminal 1 
carried by a user is preferably designed in the shape of 
a card rather than a so-called information terminal, 
from the viewpoint of the portability <> A portable 
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authentication card for the communication with a user 
terminal on the electronic commerce by the infrared rays 
can be realized by mounting a fingerprint sensor and a 
chip for calculation and data storing on a card 
generally called as an IC card where an integrated 

circuit can be mounted. 

Although the above description has been made in 
the case where the infrared communication is performed 
between the portable terminal 1 and the authentication 
' executing device 2, it is, of course, possible to use 
radio waves or ultrasonic instead of the infrared rays. 
If connecting the portable terminal 1 to the 
authentication executing device 2 by a cable, or 
inserting the portable terminal 1 into the 
authentication executing device 2. or bringing the 
portable terminal 1 into contact with the authentication 
executing device 2, in some electric and magnetic means, 
the basic operation is the same. . 

Although the above description has been made in 
the case where each user carries his or her own portable 
terminal/with only the data of one user stored therein. 
lt is also possible to reali« an authentication system 
in which, with a plurality of fingers and their secret 
information stored in a portable terminal, if only any 
registered user enters the fingerprint, only the secret 
information of the user himself or herself is sent to an 
authentication executing device. In this case, the 
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fingerprint checking unit 13 S? times repeats the 
©p®ratio& of comparing th© fing©rpri&t feature S 
©fet&i&©<4 from the user's inp*3t fingerprint with each 
fingerprint feature i&formatiPP ? stored for N persons,, 
S m$ i£ finding the fingerpri&fe fQ&tur© information F 

hwipg th© highest score , th<3 ^§©r corresponding to the 
^i&g©rp^int featur© S eaa b@ iup<i©ifie4o 

described above 9 i$& th© e&s® of & patching 
$&ge3?&tb& of almost showing th® ©core 0 in th© dif ferent 

JO ' fingerprints and shoeing the high score in th© same • 
fingerprints without fail, th© operation ^ill stop at 
. th© time of finding the higfeev seore than a given 

fchr@@hold, without repeating th© operation N time©, and 
th© fingerprint information F corresponding to the same 

15 • ©@©r@ can be judged to be matched fingerprint 

information o When every scor© proves to be lower than 
th© threshold even if repeating the operation W time®, a 
^eer can't be specified and a mo^&g© "impossible to 
specify" is to be issued «, 

20 The above example has been taken in the case 

where the authentication executing device 2 can be 
directly communicated with the portable terminal 1 via 
the infrared rays or th® like<> Besides , it is possible 
to realise authentication between the remote machines, 

25 with an intermediate terminal put between the portable 

terminal 1 and the authentication executing device 2 • 
This second embodiment will be described with 
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reference to Fig. 4. This is a variation of the first 
embodiment. Assume that, in the electronic commerce, a 
provider of a trading service manages the authentication 
executing device 2 and a shop or the like manages its 
set terminal, where a user carries the portable terminal, 
1, for example, in the shape of IC card, for certifying 
the identity of a trading member. Here, the user enters 
bis or her fingerprint and certifies that he or she is 
the authorized user in the same way as mentioned above. 
The portable terminal 1 and the authentication executing , 
device 2 are agreed about the secret key through the 
intermediation of a message transferring unit 3 of the 
set terminal, and the secret information for certifying 

he authorized identity is sent to the authentication 
executing device 2 by use of the secret key, thereby 
realizing the desired authentication- 

in this case, the portable terminal 1 is 
connected to the set terminal directly, or via a cable, 
or via the non-contact typed communication such as the 
infrared rays, and the set terminal is connected to the 
authentication executing device 2 via a telephone line 
or a network for the exclusive use. The set terminal xs 
only to translate a message without seeing the content 
thereof, as the intermediate of communication. 

in this way, even if there is an intermediate 
means between the portable terminal 1 and the 
authentication executing device 2, they are agreed about 
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the ®ees?@t key, exchanging s g^gyet message o Therefore, 
$t --is passible to realise © sysfeea eapabl© of Stepping 
fc&e seewyity of the secret &ageg5istion even if the @et 
terminal ©n tfee way is managed a vicious manager o 

& thi£^ embodiment o£ fch® present invQntion will 
^© d®serib®4 with reference fc® Pig „ Xn the third 
©^©^is^nt? assise that the @®®t©nt ©2 © £ii® is 
©nesrypt®^ lest the file st©r@4 m a personal ©©saputer 
19G) should b© read eufc by fc&© ©th®^ person. Eaeh user 
@&^ri@© hi© ©r her ow portafel© t@rminal i, wher® the 
fingerprint feature data of hi© or her proper linger and 
tb@ se©r©t Hey for use in the £il@ encryption ail thQ 
secret 4ata not readable in the ©rdinal way are stored 
i& th@ U©@r inherent information staring unit 13 , 

Xn this case, the PC corresponds to the 
authentication executing devic© 2 Q and the data 
cosssaunication between the portable terminal 1 and the 
authentication executing device 2 is performed via the 
infrared rays- When a user tries to encrypt a file of 
the PC, the user specifies the file and then enters his 
or her registered fingerprint to the fingerprint sensor 
10 of the portable terminal L When the sensor 10 
receives the fingerprint's image , the fingerprint is 
checked 9 the both parties are agreed about a secret key 
for the communication, and the secret key K2, encrypted 
by using it, for file encryption is sent from the 
portable terminal 1 to the PC in the same method as 
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mentioned above. 

After decrypting the data in the authentication 
message decrypting unit 23, the PC uses the secret key 
K2 and executes the encryption operation of the 
specified file, by way of example of the user-inherent 
operation. The common key encryption method such as DBS 
is employed for encryption. It is impossible to read out 
the content of the encrypted file. 

When a user tries to decrypt the file on the PC 
" (return the file by releasing the key), the user 
specifies the encrypted file, and then enters the 
registered fingerprint to the fingerprint sensor 10 of 
the portable terminal 1. When the sensor 10 receives the 
fingerprint's image, the fingerprint is checked in the 
same way as mentioned above, the both parties are agreed 
about the secret key for the communication, and the 
secret key K2, encrypted by using it, for file 
encryption is sent from the portable terminal 1 to the 
PC. After decrypting the data in the authentication 
message decrypting unit 23, the PC uses the secret key 
K2 and executes the decrypting operation of the 
specified encrypted file, by way of example of the user 
inherent operation. Thus, the content of the file is 
returned to be readable. 

According to these operations, only when the 
correct fingerprint of an authorized user is entered to 
a specified portable terminal, the decrypting operation 



is allowed, and the file is decrypted . In this case, 
unless the correct fingerprint is entered to the 
portable terminal of the user, the file will not be 
decrypt-ed, thereby making it possible to keep the 
content of the file in secret . Further , the terminal Lb 
small enough to be portable conveniently - 

although the present invention ha© been described 
in the case of using the fingerprint by way of example 
of biometrics , it is also possible to use the other 
biometrics (features particular to the individual), with 
the other biometrics such as palm pattern, face, iris, 
retina pattern, palm shape, handwriting, voice print, or 
the like input instead of fingerprints and with a means 
of extracting the features for matching replaced with 
the fingerprint sensor and the fingerprint feature 
extracting unit* 

Fig* 5 is a block diagram showing the case of 
realising the portable terminal 1 by use of software. 

The portable terminal comprises an input unit 41, 
storing units 42 and 43, a communication unit 44, a 
storing medium 45, and a data processor 46 o The input 
unit 41 corresponds to th© fingerprint sensor 10 • The 
storing unit 42 corresponds to the user inherent 
information storing unit 13. The storing unit 43 
corresponds to the hard disko The communication unit 44 
corresponds to the communication message sending unit 16. 
The storing medium 45 is a storing medium such as FD 
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(Floppy Disk), CD-ROM, MO (Optical Magnetic Disk), and 
the like, for storing an authentication program 
including each unit, excluding the hardware portion of 
the communication message sending unit 16 of the 
fingerprint sensor 10 from the components of the 
portable terminal 1 of Fig. 1 and Fig. 4. The data 
processor (CPU) 46 reads out the authentication program 
from the storing medium 45 and writes it into the 
storing unit 43, thereafter executing the program. 

Fig. 6 is a block diagram showing the case of 
realizing the authentication executing device 2 by use 
of software. The authentication executing device 
comprises a communication unit 51, a storing unit 52, an 
output unit 53, a staring medium 54, and a data 
processor 55. The communication unit 51 corresponds to 
the communication message receiving unit 21 of Fig. 1 
and Fig. 4. The storing unit 52 corresponds to the hard 
disk. The output unit 53 is an output device for 
supplying the execution results of the user inherent 
operation executing unit 24. The storing medium 54 is 
the same as the storing medium 45, which stores an 
authentication executing program including each unit, 
excluding the hardware portion of the communication 
message receiving unit 21, from the components of the 
authentication executing device 2 shown in Fig. 1 and 
Fig. 4. The data processor 55 reads out the 
authentication executing program from the storing medium 
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§4 and writes it into the steriag. unit 52 r thereafter 
ess@eut4.ag feh© program. 

set forth hereiaab©v® ? the present invention 
has fch® £@3>l©wiag significant effects, 

©j Py ma}d.a<§ us© of ta® biometries identification 
£©©haiqw©f the present inveafcioa can realize aa 
©is-fch©afei©©tioa system free £r@sa ® trouble of rem©saberiag 
© jp©ssw©r«g ©ad also fre© from © risk that the other 
p©^©oa ©et® liH® aa a\sthorig@4 us®£» 

b) By keeping the biometries data ia a portable 
t<§raiaal wader control of a user,- and executing the 
©p@£ati©a© of biometrics input, feature eactraetien, and 
etching ia the portable terminal, the present invention 
makes it possible to manage the biometrics information 
easily and prevent from unauthorised access. Further, 
the pQrtable terminal is decreased in size and weight, 
that it is convenient to carry. 

m) By establishing the eessauaieatioa between the 
portable terminal and the authentication executing 
device by means of the infrared rays, radio waves, and 
sound waves, the present invention is free from a 
trouble of connecting them by a cable or inserting a 
terminal into a PC. 

d) Even if the infrared communication is 
intercepted, it is impossible to read a password because 
a message is encrypted. 

e) Even if the coseauaication content is recorded 
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and reproduced by the other person, it is impossible for 
the other person to make use of it because a secret key 
is different every time; 

Although the invention has been illustrated and 
described with respect to exemplary embodiments thereof, 
it should be understood by those skilled in the art that 
the foregoing and various other changes, omissions and 
.additions may be made therein and thereto, without 
departing from the scope of the present invention. 
Therefore, the present invention should not be under- 
stood as limited to the specific embodiments set out 
above but to include all possible embodiments which can 
be embodied with the encompassed scope and equivalents 
thereof with respect to the features set out in the 

appended claims. 

Bach feature disclosed in this specification 
(which term includes the claims) and/or shown in the 
drawings may be incorporated in the invention indepen- 
dently of other disclosed and/or illustrated features. 

The text of the abstract filed herewith is 
repeated here as part of the specification. 

An authentication method using biometrics 
identification comprises the steps of: identifying a 
user by biometrics entered from a portable authenti- 
cation terminal; when the user has been registered 
previously, establishing communication between the 



authentication terminal and an authentication executing 
device independent of the authentication terminal, and 
calculating a common secret key for use in transmission 
of an authentication message; encrypting an authenti- 
cation message including the user's inherent information 
in the authentication terminal based on the secret key; 
sending the encrypted authentication message from the 
authentication terminal to the authentication executing 
device; and decrypting the authentication message in the 
authentication execution device based on the calculated 
secret key, thereby executing an operation depending on 
the user- inherent information included in the message- 
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An authentication method using biometrics 
identification, comprising the steps of: 

identifying a user by biometrics entered from a 
portable authentication terminal; 

when the user has been registered previously^ 
establishing communication between the authentication 
terminal and an authentication executing device 
independent of the authentication terminal, and 
calculating a secret key for use in transmission of an 
authentication message; 

encrypting the authentication message including 
the user-s inherent information based on the secret key 
in the authentication terminal; , 

sending the encrypted authentication message from 
the authentication terminal to the authentication 
executing device; and, 

decrypting the authentication message in the 
authentication executing device based on the secret Key, 
thereby executing an operation depending on the user- 
inherent information included in the message. 



2 . An authentication method using biometrics 

identification as set forth in Claim 1, wherein 

the communication message is transmitted in one 



- 41 - 



of non-contact typed communications, for example, via 
5 infrared rays, radio waves, and sound waves. 

3 o An authentication method using biometrics 

identification as set forth in Claim 1, wherein 

the user inherent information included in the 
authentication message includes such secret information 
5 as cannot be read out without identification of an 

authorized user from the biometrics in the 
* authentication terminal . 

4„ An authentication method using biometrics 

identification as set forth in Claim 1, wherein 

an operation to be executed by the authentication 
executing device depending on the user-inherent 
5 information is a son- executable operation without 

identification of an authorized user from the biometries 
in the authentication terminal, and therefore a function 
of authenticating that a person having registered the 
biometrics previously carries and uses the 
10 authentication terminal is provided. 

5. An authentication method using biometrics 

identification as set forth in Claim 1, wherein 

the user inherent information included in the 
authentication message includes individual information 
5 that cannot be read out=>without identification of an 
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authorized user from the biometrics in the 
authentication terminal, and using the individual 
information, the authentication executing device 
executes the operation depending on the information of. a 
user employing the authentication function. 

6. An authentication method using biometrics 

information as set forth in Claim 1,. wherein 

the operation performed by the authentication., 
executing device depending on the user-inherent 
information includes file encryption and decryption, and 
the secret key for use in this encryption and decryption 
is to be stored in such a way that the secret key cannot 
be read out without identification of an authorized user 
from the biometrics in the authentication terminal. 



7. A portable terminal for authentication using 

biometrics identification, comprising: 

biometrics -image input means for receiving a 

user's biometrics image; 
5 biometrics -feature extracting means for 

extracting a biometrics feature for matching from the 
input biometrics image; 

user-inherent information storing means for 
storing the biometrics feature and inherent information 

10 of the user in pairs; 

secret-key-agreeing means for deciding a key for 
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use in encryption of an authentication message between 
the authentication executing device and the portable 
terminal ? 

15 biometrics -image checking means for comparing the 

biometrics image esetracted from the user's input 
biometrics image with the biometrics feature stored in 
said user-inherent information storing means , judging 
whether the user having entered the biometrics image 

20 this time is a registered user or not, and when this 

user is a registered user, supplying the inherent 
information stored in pairs with the biometrics image in 
said user inherent information storing means; 

authentication-message encrypting means for 

25 encrypting the user's inherent information by the 

decided secret key? and^ 

communication-message sending means for sending a 
communication message to the authentication executing 
device o 

30 

So A portable terminal as set forth in Claim 7, 

therein t t 

said user-inherent information storing means 
stores the biometries features and inherent information 
5 for a plurality of users o 



9o A portable terminal as set forth in Claim 7 , 

wherein * 
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said biometrics-image checking means estimates a- 
score indicating similarity of the biometrics images, 
and judges that the user having entered the biometrics 
image this time is a registered user when the score is 
higher than a threshold. 

10. A portable terminal as set forth in Claim 7, _■ 
wherein: 

said user-inherent information storing means 
stores the biometrics features and inherent information 

for a plurality of users; and, 

said biometrics-image checking means estimates 
score indicating similarity of the biometrics images, 
and judges that the user having entered the biometrics 
image this time is a registered user when the score is 
higher than a threshold. 

H. A portable terminal as set forth in Claim 7, 

wherein'- 

said secret-key-agreeing means creates any random 
number, sends the random number to the authentication 
executing device, and calculates the key by use of a 
secret formula based on the same random number. 

12 . A portable terminal as set forth in Claim 7, 

wherein 

said user-inherent information storing means 



stores "the biometrics features and inherent information 
for a plurality of users; and, 

said secret- key- agreeing means creates any random 
number , sends the random number to the authentication 
executing device, and calculates the key by use of a 
secret formula based on the same random number. 

13 o A portable terminal as set forth in Claim 7 , 

said biometrics~image checking means estimates Q. 
score indicating similarity of the biometries images, 
and judges that the user having entered the biometrics 
image this time is a registered user when the score is 
higher than a threshold? and^, 

said secret- key- agreeing means creates any random 
number, sends the random number to the authentication 
executing device, and calculates the key by use of a 
secret formula based on the same random aumber. 

14- A portable terminal as set forth in Claim 7, 

where ia ' 

said secret -key- agreeing means performs mutual 
authentication together with the authentication 
executing device according to a predetermined protocol 
and countersign prior to deciding the key. 

IS. A portable terminal as set forth in Claim 7, 
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wherein - 

said user-inherent information storing means 
stores the biometrics features and inherent information 
for a plurality of users; and, 

said secret-key-agreeing means performs mutual 
authentication together with the authentication 
executing device according to a predetermined protocol 
and countersign prior to deciding the key. 



- 16 . a portable terminal as set forth in Claim 7, 

wherein - 

said biometrics-image checking means estimates , 
score indicating similarity of the biometrics image,, 
5 and judges that the user having entered the biometrics 

image this time is a registered user when the score is 
higher than a threshold; and, 

said secret-key-^greeing means performs mutual 
authentication together with the authentication 
executing device according to a predetermined protocol 
and countersign prior to deciding the key. 

17. A portable terminal as set forth in Claim 7, 

wherein: i 
said secret-key-agreeing means creates any random 

number, sends the created random number to the 
5 authentication executing device, receives the created 

random number from the authentication executing devxce. 



and eseafeog tho koy by us© ©2 befeh raadom ausnbes?©. 



m , & portable terminal a§ pet forth in Claim 7, 

T??higr@ia 8 

user— inherent &®£©smatioa storing mesas 
tfeesva fch@ biometrics features ©ad iaaes©at iaf esaatioa 

s©id s©eret<=fcey~agr<iei$g meaas estates say random 
^^sg&s^ sQadg the created ra®d©^ number -fee th@ 
•g^-fehentieatioa executing devie©^ s?ee<isiv@s the e§?@ated 
^sadom number from the authentication executing devie©, 
cresfe@s the key by use of both random ausiber® . 

3.S„ & portable terminal aa set forth in Claim 7, 



gaid biometrics -image 6h@e3ciag means estimates 
ms© indicating similarity of the biometries images, 
Radges that the uses having entered the biometries 
image this time is a registered user when the score is 
higher thaa a threshold; aadj, 

said seeret-key-^agreeing means creates any random 
number, sends the cheated random number to the 
authentication executing device, receives the created 
random number from the authentication executing deviee, 
aad creates the k©y by us© of both raadoa ausbers. 

20. A portable terminal as set forth in Claim 7, 
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IS 



which 

communicates with the authentication executing 
device by one of non-contact types of communications, for 
example, via infrared rays, radio waves, and sound waves. 

21. A portable terminal as set forth in Claim 7 f 
which*. 

communicates with the authentication executing ^ 
device through another terminal. 

22. An authentication system for performing 
authentication using biometrics identification, having = 

a portable terminal and an authentication ^ 

executing device, 

said portable terminal including: 
biometrics -image input means for a user's 

receiving biometrics image; 

biometrics-feature extracting means for , 
extracting biometrics feature for matching from the 

input biometrics image; 

user-inherent information storing means for 
storing the biometrics feature and inherent information 

of the user in pairs; 

secret -key-agreeing means for deciding a key for 
use in encryption of an authentication message between 
said authentication executing device and said portable 

terminal; 
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biometrics -image checking means for comparing the 
biometrics image extracted from the user's input 

20 biometrics image with the biometrics feature stored in 

said user-inherent information storing means,, judging 
whether the user having entered the biometrics image 
this time is a registered user or not, and when this 
user is a registered user,, supplying the inherent 

25 information stored in pairs ^ith the biometrics image in 

said user inherent information storing means? 

authentication-message encrypting means for 
encrypting the user's inherent information by use of the 
decided secret key; and;, 

30 cossauaieation message sending means for sending a 

communication message to said authentication executing 
device ; 

said authentication executing device including s 
secret -key- agreeing means for deciding a key for 
35 use in encryption of an authentication message between 

said portable terminal and said authentication executing 
device ; 

eo^unieation-message receiving means for 
receiving a eo^unieation message sent from said 

40 portable terminal? 

authentication-message decrypting means for 
decrypting the communication message by use of the 
decided secret key; and ? 

user -inherent operation executing means for 
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executing the user- inherent operation based on the 
inherent information decrypted from the communication 
message. 

23. An authentication system as set forth in Claim 22, 

wherein*. 

said biometrics image-checking means estimates a 
score indicating similarity of the biometrics images, 
and judges that the user having entered the biometrics 
image this time is a registered user when the score is. 
higher than a threshold. 



24. An authentication system as set forth in Claim 22, 
whereim 

said user-inherent information storing means of 
said portable terminal stores the biometrics features 
and inherent information for a plurality of users; and, 

said biometrics-image checking means estimates a 
score indicating similarity of the biometrics images, 
and judges that the user having entered the biometrics 
image this time is a registered user when the score is 
higher than a threshold. 

25. An authentication system as set forth in Claim 22, 
wherein* 

said secret-key-agreeing means of said portable 
terminal creates any random number, sends the random 



number to said authentication executing device, and 
calculates the key by use of a secret formula based oa 
the same random number „ 

26 o An authentication system as set forth in Claim 22, 

wherein - 

said user— inherent information storing means ©f 
said portable terminal stores the biometrics features 
and inherent information for a plurality of users; and, 

said secret-key— agreeing means creates any random 
number, sends the random number to said authentication 
executing device, and calculates the key by use of a 
secret formula based on the same random number o 

27 o An authentication system as set forth in Claim 22, 

therein " 

said biometries-image checking means of said 
portable terminal estimates a score indicating similarity 

of the biometrics images, and judges that the user 
having entered the biometrics image this time is a 
registered user ^?hen the score is higher than a 
threshold; and,, 

said secret— key-=agreeing means creates any random 
number, sends the random number to said authentication 
executing device, and calculates the key by use of a 
secret formula based on the same random number. 
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28. An authentication system as set forth in Claim 22, 
wherein: 

said secret-key-agreeing means of said 
authentication executing device calculates the key by 
use of the same secret formula as that of said portable 
terminal based on the random number sent from said 
portable terminal f 

29 . An authentication system as set forth in Claim 22, 
wherein: 

said secret key agreeing means of said 
authentication executing device receives the random 
number from said portable terminal, creates any random 
number, and creates the key by use of both random 
numbers * 

30. A computer-readable memory storing an 
authentication program for making a computer perform 
authentication using biometrics identification, 

the authentication program comprising: 

a biometrics-image input step for a user's 

receiving biometrics image; 

a biometrics-feature extracting step for 
extracting biometrics feature for matching from the 

input biometrics image; 

a ,eeret->«y-a,re.in 9 step for deciding a Key for 
use in encryption of an authentication messace between 



said authentication executing device and said portable 

© biometrics -image eh@e&ing step for comparing 
biometries image e3straet@4 £r©m the user's input 
biom^fcrie^ image with the ^osae^ies feature stored ia 
©&i$ us^g^iafeerent inf ormati©& Bering ®©&n§ gof gtoriag 
p p€4g tfc@ biometries featu^@g and i$iher§&t 
4,®3!©rmati©n the user, judging whether th@ u§@£ having 
©^t@r@d the biometries image £his time is 9 registered 
- u®@^ ©r not? and when this ^g@r is a registered user, 
supplying the inherent information stored in pairs with 
t&e biometries image in said user^inherent information 
storing means? 

an authentication-message encrypting £tQp for 
encrypting the user's inherent information by u^e o2 th© 
d©©id®d secret key; and^ 

a eo^unieation-message sending st@p lending 
© ^o^unieation message to said authentication executing 
device • 

31 o A computer-readable memory as set forth in Claim 

30, therein : 

said biometries-image checking step of said 
authentication program estimates a score indicating 
similarity of the biometrics images, and judges that the 
user having entered the biometrics image this time is a 
registered user when the score is higher than a 
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threshold. 



32. A computer- readable memory as set forth in Claim 

30, wherein; 

said secret- key- agreeing step of said 
authentication program creates any random number, sends 
the random number to said authentication executing 
device, and calculates the key by use of a secret 
formula based on the same random number. 

33. A computer readable memory as set forth in Claim 

30, wherein: 

said biometrics-image checking step of said 
authentication program estimates a score indicating 
similarity of the biometrics images, and judges that the 
user having entered the biometrics image this time is a 
registered user when the score is higher than a 

thre shold ; and, 

said secret- key-agreeing step of said 
authentication program creates any random number, sends 
the random number to said authentication executing 
device, and calculates the key by use of a secret 
formula based on the same random number. 



34. A computer 

30, 



-readable memory as set forth in Claim 



storing an authentication executing program of 
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said authentication executing device, 
5 the authentication executing program making a 

computer perform: 

a secret-key^ agreeing step for deciding sl key for 
use in encryption of an authentication message between 
the authentication program and the authentication 
10 executing program? 

a eosmunieation-aessage receiving step for 
receiving a eos^unieation message sent from the 
authentication program? 

an authentication-message decrypting step for 
15 decrypting the communication message by use of the 

decided secret key? and^ 

a user-inherent operation executing step for 
executing the user—inherent operation based on the 
inherent information decrypted from the communication 
20 message o 

35 o A computer-readable memory as set forth in Claim 

34, wherein % 

said secret ~k@y~ agreeing step of the. 
authentication executing program calculates the key by 
5 use of the same secret formula as that of said portable 

terminal based on the random number sent from said 
portable terminal,, 



36 o A computer -readable memory as set forth in Claim 
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34, wherein: 

said secret-key-agreeing step of the authenti- 
cation executing program receives the random number from 
said authentication program, creates any random number; 
and creates the key by use of both random numbers. 

37. An authentication message substantially as herein 
described with reference to and as shown in Figures 1 to 
6 of the accompanying drawings. 

38. A portable terminal for authentication using 
biometrics identification, the terminal being substanti- 
ally as herein described with reference to and as shown 
in Figures 1 to 6 of the accompanying drawings. 

39. An authentication system for performing authenti- 
cation using biometrics identification, the system being 
substantially as herein described with reference to and 
as shown in Figures 1 to 6 of the accompanying drawings. 

40. A computer- readable memory storing an authenti- 
cation program for making a computer perform authenti- 
cation using biometrics identification, the computer - 
readable memory being substantially as herein described 
with reference to and as shown in Figures 1 to 6 of the 
accompanying drawings. 
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